Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
File: mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json)
Hash identifier: Npuw/zpRsuwz9bdKnurJ6OgSM/xH8ZBYondk+8pnLEs=
Subject key identifier: 88:F8:3B:F4:A5:3F:E5:BD:08:C9:5F:7F:41:53:51:F2:D8:8F:DF:DF
Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
Certificate issuer: /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Certificate serial: 019A4EF494EBAF9FC751A2B7EDE00B5F7C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:00:43 +0000
Manifest this update: Tue 04 Nov 2025 13:00:43 +0000
Manifest next update: Wed 05 Nov 2025 13:00:43 +0000
Files and hashes: 1: CfUrafygYGSePjcIej3rxMGbJDI.roa (hash: X6AZHbughYjpJFwaVsupdcP3UOvik8OA/b5qiG++R3Q=)
2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: 0EQkh0et93q1usjo+P+Tz1Oe0sDG6yXwLGI+MzYrpsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:94:eb:af:9f:c7:51:a2:b7:ed:e0:0b:5f:7c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Validity
Not Before: Nov 4 13:00:43 2025 GMT
Not After : Nov 5 13:00:43 2025 GMT
Subject: CN=88f83bf4a53fe5bd08c95f7f415351f2d88fdfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:17:64:02:13:61:6c:c6:fe:0d:bb:23:cb:
48:d3:5b:c9:5e:28:5f:0c:38:04:3a:86:86:ad:8e:
76:2c:c1:01:f3:e1:2d:0f:f1:e0:4f:3c:d9:78:11:
7e:d5:cd:7f:e8:bc:ea:e4:d6:55:84:4d:7f:ea:d0:
d6:71:24:fd:f3:fa:ac:a6:10:f6:43:d8:d5:b1:fe:
81:a7:ca:e8:05:16:2d:82:1c:bd:84:f7:39:33:32:
66:d3:b7:46:e3:93:93:a6:a7:5b:82:3d:95:e6:7b:
34:df:81:60:ec:82:ed:2b:bd:53:ec:0f:2c:98:3c:
37:fb:fe:e1:1f:ba:27:b9:b5:a1:28:32:cf:f8:ea:
d8:ce:14:5d:81:1e:c3:88:2c:57:20:b8:24:13:05:
a6:fc:18:ac:fa:ba:70:e7:8b:00:c9:53:21:7c:7f:
13:ed:28:0f:a9:f1:e0:cd:d8:ac:d7:f4:61:98:c8:
7d:d3:6d:03:5f:8c:e6:76:ab:9f:f1:f6:f7:d1:4b:
32:af:af:0a:a6:68:02:a1:77:67:dc:26:da:e7:bb:
d7:8f:53:06:59:c3:2a:cf:a3:76:38:2a:78:19:31:
67:5a:af:71:8a:9b:b3:54:cf:c8:c0:c9:b8:24:b7:
dd:d1:77:d4:1a:35:04:58:a4:01:bf:b2:1b:e8:82:
f1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F8:3B:F4:A5:3F:E5:BD:08:C9:5F:7F:41:53:51:F2:D8:8F:DF:DF
X509v3 Authority Key Identifier:
keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d2:75:bb:64:88:46:b0:9d:d3:7c:3a:3e:e9:4a:ef:31:27:
5e:10:d3:d4:39:81:53:35:f7:3b:96:4c:85:c0:05:b3:fa:05:
4b:5b:8e:fb:3a:a2:7f:59:6f:fd:47:fc:b7:31:c1:d1:e4:25:
e5:91:d5:e7:8c:52:8d:92:4b:7d:fb:c6:9f:35:23:68:bf:50:
28:b6:cc:2e:9f:8a:ec:b1:5e:05:84:65:84:ab:53:5c:af:b9:
af:aa:78:08:b6:fb:f8:1d:8d:35:1d:ea:f4:e0:22:28:c3:31:
a6:38:4f:b3:52:53:e9:f9:6b:d2:02:89:0b:80:63:b3:07:55:
60:63:64:e8:22:6e:8e:93:cc:89:5e:53:de:1f:55:da:8a:12:
a4:a5:e5:2f:55:92:70:53:e8:e5:7f:b6:81:29:b2:03:9c:42:
71:20:43:d0:52:38:5a:0e:df:3b:83:e9:1c:54:5a:bb:93:4e:
86:46:cc:0c:de:cb:31:c1:d9:71:2d:87:71:d5:05:52:35:d8:
c5:c2:70:1a:78:75:c5:7d:6b:b1:c6:37:4f:90:31:16:35:ae:
3d:73:15:83:9e:ad:2e:97:af:ec:f3:a5:5f:5a:bc:84:5e:6c:
18:81:34:87:54:58:97:74:28:d2:68:73:12:9d:42:4e:2b:02:
c7:8b:11:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:37 2025 by rpki-client